Linux Distros Unpatched Vulnerability : CVE-2020-5398

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Spring Framework, versions 5.2.x prior to 5.2.3, versions 5.1.x prior to 5.1.13, and versions 5.0.x prior to 5.0.16, an application is vulnerable to a...

Oracle Siebel Server <= 21.1 (April 2021 CPU)

The versions of Oracle Siebel CRM installed on the remote host are affected by a vulnerability as referenced in the April 2021 CPU advisory. - Vulnerability in the Siebel Engineering - Installer and Deployment product of Oracle Siebel CRM component: Siebel Approval Manager Spring Framework...

Vmware Spring Framework Remote Code Execution (CVE-2020-5398)

A remote code execution vulnerability exists in VMware Spring Framework. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Update application links to 5.4.23 to fix CVE-2020-5398

Affected versions of Atlassian FishEye and Crucible allow remote attackers to view sensitive information via an Information Disclosure vulnerability in a vulnerable version of the Application Links component. The affected versions are before version 4.8.6. Affected versions: version 4.8.6 Fixed...

Update Atlassian Platform to 3.5.19 to fix CVE-2018-1000613, CVE-2019-17571 and other vulnerabilities

Update Atlassian Platform from 3.5.17 to 3.5.19. The new platform version brings changes in the following libraries: update com.atlassian.applinks: from 5.4.21 to 5.4.23 update com.atlassian.plugins: from 4.4.10 to 4.4.14 update com.atlassian.sal: from 3.1.2 to 3.1.3 update com.atlassian.streams:...

Important: Red Hat Security Advisory: Red Hat Fuse 7.8.0 release and security update

A minor version update from 7.7 to 7.8 is now available for Red Hat Fuse. The purpose of this text-only errata is to inform you about the security issues fixed in this release. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring...

Spring Framework Vulnerability - CVE-2020-5398

h3. Issue Summary Security vulnerability scan gave a red flag for Spring Framework plugin version that is used in Bitbucket Server version 6.10.0. The CVE-2020-5398 is being noted from the report scan. h3. Description Plugin: Spring Framework 5.0.x 5.0.16 / 5.1.x 5.1.13 / 5.2.x 5.2.3 Spring...

Spring Framework Vulnerability - CVE-2020-5398

h3. Issue Summary Security vulnerability scan gave a red flag for Spring Framework plugin version that is used in Bitbucket Server version 6.10.0. The CVE-2020-5398 is being noted from the report scan. h3. Description Plugin: Spring Framework 5.0.x 5.0.16 / 5.1.x 5.1.13 / 5.2.x 5.2.3 Spring...

CVE-2020-5398

A flaw was found in springframework in versions prior to 5.0.16, 5.1.13, and 5.2.3. A reflected file download RFD attack is possible when a "Content-Disposition" header is set in response to where the filename attribute is derived from user supplied input. The highest threat from this vulnerabili...

ai.hyacinth.framework:core-service-admin-server (>=0.5.0, <=0.5.21), ai.hyacinth.framework:core-service-gateway-server (>=0.5.0, <=0.5.21) +267 more potentially affected by CVE-2020-5398 via org.springframework:spring-webflux (>=5.1.0.release, <=5.1.12.release)

org.springframework:spring-webflux MAVEN version =5.1.0.release, =0.5.0, =0.5.0, =0.5.0, =2.1.2.release, =0.5.0, =3.1.64, =3.1.37, =3.1.13, =3.1.64, =3.1.64, =3.1.64, =3.1.64, =3.1.64, =3.1.165 and more Source cves: CVE-2020-5398 Source advisory: GHSA-8WX2-9Q48-VM9R...

ai.ost:fastjson-protobuf (>=0.1.1, <=1.0.0), ai.ylyue:yue-library-base (>=finchley.sr2.sr1, <=finchley.sr4.1) +2373 more potentially affected by CVE-2020-5398 via org.springframework:spring-webmvc (>=5.0.0.release, <=5.0.15.release)

org.springframework:spring-webmvc MAVEN version =5.0.0.release, =0.1.1, =finchley.sr2.sr1, =finchley.sr4, =finchley.sr2.sr1, =finchley.sr2.sr1, =finchley.sr4, =0.0.2, =0.0.3, =2.0.3.release, =2.0.2.release, =1.0.3.release, =2.0.0, =1.0.0, =1.0.0, =0.0.8-alpha, =0.0.17-alpha and more Source cves:...

ai.aitia:arrowhead-application-library-java-spring (>=4.4.0.0, <=4.4.0.1), ai.hyacinth.framework:core-service-admin-server (>=0.5.0, <=0.5.21) +3813 more potentially affected by CVE-2020-5398 via org.springframework:spring-webmvc (>=5.1.0.release, <=5.1.12.release)

org.springframework:spring-webmvc MAVEN version =5.1.0.release, =4.4.0.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =greenwich.sr1, =greenwich.sr2, =greenwich.sr1, =greenwich.sr1, =greenwich.sr2, =greenwich.sr2.1 - ai.ylyue:yue-library-web 2.1.0 and more Source cves: CVE-2020-5398 Source...

ai.aitia:arrowhead-application-library-java-spring (>=4.4.0.0, <=4.4.0.1), ai.hyacinth.framework:core-service-admin-server (>=0.5.0, <=0.5.21) +3813 more potentially affected by CVE-2020-5398 via org.springframework:spring-webmvc (>=5.1.0.release, <=5.1.12.release)

org.springframework:spring-webmvc MAVEN version =5.1.0.release, =4.4.0.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =greenwich.sr1, =greenwich.sr2, =greenwich.sr1, =greenwich.sr1, =greenwich.sr2, =greenwich.sr2.1 - ai.ylyue:yue-library-web 2.1.0 and more Source cves: CVE-2020-5398 Source...

au.org.consumerdatastandards:client-cli (>=1.1.1, <=1.12.0), au.org.consumerdatastandards:data-holder (>=1.0.0, <=1.12.0) +1443 more potentially affected by CVE-2020-5398 via org.springframework:spring-webmvc (>=5.2.0.release, <=5.2.2.release)

org.springframework:spring-webmvc MAVEN version =5.2.0.release, =1.1.1, =1.0.0, =0.0.9, =0.0.9, =0.0.9, =0.0.9, =0.0.9, =0.0.9, =0.0.9, =0.0.9, =0.0.1, =0.0.3 - ca.uhn.hapi.fhir:hapi-fhir-cli-api 4.1.0 - ca.uhn.hapi.fhir:hapi-fhir-cli-jpaserver 4.1.0 - ca.uhn.hapi.fhir:hapi-fhir-igpacks 4.1.0 and...

am.ik.github:reactive-github-client (>=0.0.1, <=0.0.4), capital.scalable:spring-auto-restdocs-core (>=2.0.2, <=2.0.6) +314 more potentially affected by CVE-2020-5398 via org.springframework:spring-webflux (>=5.0.0.release, <=5.0.15.release)

org.springframework:spring-webflux MAVEN version =5.0.0.release, =0.0.1, =2.0.2, =2.0.0, =2.0.0, =3.0.0.release, =3.0.0.release, =b.0.0.1, =b.0.0.1, =b.0.0.1, =b.0.0.1, =2.21.3, =0.1.0-rc5, =1.5.0-alpha2, =1.4.0-alpha4, =1.6.7 and more Source cves: CVE-2020-5398ht...

am.ik.github:reactive-github-client (>=0.0.1, <=0.0.4), capital.scalable:spring-auto-restdocs-core (>=2.0.2, <=2.0.6) +314 more potentially affected by CVE-2020-5398 via org.springframework:spring-webflux (>=5.0.0.release, <=5.0.15.release)

org.springframework:spring-webflux MAVEN version =5.0.0.release, =0.0.1, =2.0.2, =2.0.0, =2.0.0, =3.0.0.release, =3.0.0.release, =b.0.0.1, =b.0.0.1, =b.0.0.1, =b.0.0.1, =2.21.3, =0.1.0-rc5, =1.5.0-alpha2, =1.4.0-alpha4, =1.6.7 and more Source cves: CVE-2020-5398ht...

ai.hyacinth.framework:core-service-admin-server (>=0.5.0, <=0.5.21), ai.hyacinth.framework:core-service-gateway-server (>=0.5.0, <=0.5.21) +267 more potentially affected by CVE-2020-5398 via org.springframework:spring-webflux (>=5.1.0.release, <=5.1.12.release)

org.springframework:spring-webflux MAVEN version =5.1.0.release, =0.5.0, =0.5.0, =0.5.0, =2.1.2.release, =0.5.0, =3.1.64, =3.1.37, =3.1.13, =3.1.64, =3.1.64, =3.1.64, =3.1.64, =3.1.64, =3.1.165 and more Source cves: CVE-2020-5398 Source advisory: OSV:GHSA-8WX2-9Q48-VM9R...

Exploit for Cross-site Scripting in Vmware Spring_Framework

CVE-2020-5398 - RFDReflected File Download Attack for Spring...

ai.ost:fastjson-protobuf (>=0.1.1, <=1.0.0), ai.ylyue:yue-library-base (>=finchley.sr2.sr1, <=finchley.sr4.1) +2373 more potentially affected by CVE-2020-5398 via org.springframework:spring-webmvc (>=5.0.0.release, <=5.0.15.release)

org.springframework:spring-webmvc MAVEN version =5.0.0.release, =0.1.1, =finchley.sr2.sr1, =finchley.sr4, =finchley.sr2.sr1, =finchley.sr2.sr1, =finchley.sr4, =0.0.2, =0.0.3, =2.0.3.release, =2.0.2.release, =1.0.3.release, =2.0.0, =1.0.0, =1.0.0, =0.0.8-alpha, =0.0.17-alpha and more Source cves:...

am.ik.github:reactive-github-client (>=0.0.1, <=0.0.4), capital.scalable:spring-auto-restdocs-core (>=2.0.2, <=2.0.6) +314 more potentially affected by CVE-2020-5398 via org.springframework:spring-webflux (>=5.0.0.release, <=5.0.15.release)

org.springframework:spring-webflux MAVEN version =5.0.0.release, =0.0.1, =2.0.2, =2.0.0, =2.0.0, =3.0.0.release, =3.0.0.release, =b.0.0.1, =b.0.0.1, =b.0.0.1, =b.0.0.1, =2.21.3, =0.1.0-rc5, =1.5.0-alpha2, =1.4.0-alpha4, =1.6.7 and more Source cves: CVE-2020-5398ht...